...
Point #1 is simply calling DCM API to create resources and apply the logical cloud, after which etcd will be populated with all needed resources including CSR and rsync will be notified via gRPC.
Regarding all 5 points above, here is what isn't yet implemented:
- rsync can't yet request a cluster to approve a CSR (but we know how to do this)
- cluster watcher can't yet extract an issued certificate from ResourceBundleState and store it in etcd (to be read by DCM)
- potential fixes after we actually have all these pieces working together hands-off
Dev reference sheet:
To see what the monitor sees:
...